CVE-2024-53066CWE-908

CVE-2024-53066

Critical · published November 19, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
50.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

nfs: Fix KMSAN warning in decode_getfattr_attrs()

Fix the following KMSAN warning:

CPU: 1 UID: 0 PID: 7651 Comm: cp Tainted: G B

Tainted: [B]=BAD_PAGE

Hardware name: QEMU Standard PC (Q35 + ICH9, 2009)

=====================================================

=====================================================

BUG: KMSAN: uninit-value in decode_getfattr_attrs+0x2d6d/0x2f90

decode_getfattr_attrs+0x2d6d/0x2f90

decode_getfattr_generic+0x806/0xb00

nfs4_xdr_dec_getattr+0x1de/0x240

rpcauth_unwrap_resp_decode+0xab/0x100

rpcauth_unwrap_resp+0x95/0xc0

call_decode+0x4ff/0xb50

__rpc_execute+0x57b/0x19d0

rpc_execute+0x368/0x5e0

rpc_run_task+0xcfe/0xee0

nfs4_proc_getattr+0x5b5/0x990

__nfs_revalidate_inode+0x477/0xd00

nfs_access_get_cached+0x1021/0x1cc0

nfs_do_access+0x9f/0xae0

nfs_permission+0x1e4/0x8c0

inode_permission+0x356/0x6c0

link_path_walk+0x958/0x1330

path_lookupat+0xce/0x6b0

filename_lookup+0x23e/0x770

vfs_statx+0xe7/0x970

vfs_fstatat+0x1f2/0x2c0

__se_sys_newfstatat+0x67/0x880

__x64_sys_newfstatat+0xbd/0x120

x64_sys_call+0x1826/0x3cf0

do_syscall_64+0xd0/0x1b0

entry_SYSCALL_64_after_hwframe+0x77/0x7f

The KMSAN warning is triggered in decode_getfattr_attrs(), when calling

decode_attr_mdsthreshold(). It appears that fattr->mdsthreshold is not

initialized.

Fix the issue by initializing fattr->mdsthreshold to NULL in

nfs_fattr_init().

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00660 · 50.9th percentile
Weakness
CWE-908 · Use of Uninitialized Resource
Published
2024-11-19T23:15Z
Affected products (13)
ProductVersionsFixed in
linux/linux_kernel≥ 3.5, < 4.19.3244.19.324
linux/linux_kernel≥ 4.20, < 5.4.2865.4.286
linux/linux_kernel≥ 5.5, < 5.10.2305.10.230
linux/linux_kernel≥ 5.11, < 5.15.1725.15.172
linux/linux_kernel≥ 5.16, < 6.1.1176.1.117
linux/linux_kernel≥ 6.2, < 6.6.616.6.61
linux/linux_kernel≥ 6.7, < 6.11.86.11.8
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (10)
EPSS history
Timeline
  • 19 NOV 17:22Z
    nfs: Fix KMSAN warning in decode_getfattr_attrs()
    cvelistv5